Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/30d92917-64b2-3784-b6e0-655a7c72083c.roa
File: 30d92917-64b2-3784-b6e0-655a7c72083c.roa (raw, json)
Hash identifier: OljuOZrLIyR2a6J/2Q5BkOdbXhIBdRDJ337/brllLzE=
Subject key identifier: 88:BF:3E:03:04:2B:19:09:D7:AD:96:DE:16:C9:55:45:B4:38:BE:E2
Certificate issuer: /CN=18f4eabf-2388-491f-922c-4973961dfd2e
Certificate serial: 010D0C9F4328584881AB427D3B5F7712D7E3E380
Authority key identifier: 8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/30d92917-64b2-3784-b6e0-655a7c72083c.roa
Signing time: Sat 11 Jan 2025 06:51:14 +0000
ROA not before: Sat 11 Jan 2025 06:51:14 +0000
ROA not after: Fri 11 Apr 2025 05:51:14 +0000
asID: 33099
IP address blocks: 216.40.80.0/22 maxlen: 22
216.40.80.0/23 maxlen: 23
216.40.80.0/24 maxlen: 24
216.40.81.0/24 maxlen: 24
216.40.82.0/23 maxlen: 23
216.40.82.0/24 maxlen: 24
216.40.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:ab:42:7d:3b:5f:77:12:d7:e3:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f4eabf-2388-491f-922c-4973961dfd2e
Validity
Not Before: Jan 11 06:51:14 2025 GMT
Not After : Apr 11 05:51:14 2025 GMT
Subject: CN=53c36cee-724e-4f43-a483-3155bbbc63dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:00:41:75:3b:fb:27:de:2d:07:1b:24:08:
df:e7:f0:84:39:76:9f:00:73:6b:7f:1c:ac:37:68:
13:fa:aa:c9:3e:3f:35:9a:59:0a:54:b9:de:8f:7c:
0d:86:7b:d1:dd:a4:b8:48:a5:1c:df:80:03:e3:60:
34:24:e0:f1:93:df:b6:58:39:fb:c3:bd:a3:b0:0c:
2c:80:f7:1c:be:34:55:75:99:1a:f8:7e:29:77:45:
63:6c:bc:21:8d:f3:bb:d2:72:f7:90:b1:1c:4b:a4:
4f:74:e7:00:c7:c9:05:b1:c1:b7:d3:66:91:3b:ad:
6b:6d:4e:d6:f7:12:af:61:04:2f:2e:da:27:d1:fb:
41:3d:e2:be:23:56:35:fb:37:af:76:5f:23:e3:4a:
07:63:50:18:f9:19:ec:88:2b:3c:55:26:3c:00:e8:
c8:a7:e7:e2:c2:34:a2:e7:cd:80:3f:58:3c:8f:ca:
6f:6c:00:79:7a:c1:a7:44:6a:2c:f2:25:09:12:b5:
8f:b6:d6:4c:bd:aa:4e:1e:96:32:fc:d6:e1:02:1e:
3d:84:a4:04:d6:5f:23:b1:d1:da:0a:49:eb:5b:75:
49:9e:4f:5f:ec:21:3e:38:0e:dd:71:55:06:a9:01:
2d:06:7b:66:44:38:fe:c8:f2:da:e7:57:e2:5a:ff:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BF:3E:03:04:2B:19:09:D7:AD:96:DE:16:C9:55:45:B4:38:BE:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/30d92917-64b2-3784-b6e0-655a7c72083c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl
X509v3 Authority Key Identifier:
keyid:8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer
sbgp-ipAddrBlock: critical
IPv4:
216.40.80.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:96:89:02:96:c2:ea:58:f9:1a:01:de:4b:9b:5c:a5:54:89:
72:14:49:5a:cc:76:21:6a:d9:04:3e:ef:c3:26:26:45:88:81:
3b:02:50:ff:b4:8c:02:6a:b3:f2:80:56:e7:e3:ed:b0:dc:8b:
0d:a4:0d:ac:f7:22:10:80:18:67:09:92:70:cd:37:16:97:76:
5b:85:15:bc:c7:53:a5:58:f9:27:24:67:40:8c:5a:a4:b3:cc:
31:a6:f6:30:eb:fd:f4:dd:f6:bc:a8:12:ac:0c:e8:45:de:f6:
6b:49:a1:af:79:79:23:81:02:fb:37:38:f0:aa:ed:a9:66:86:
da:cc:39:c2:51:64:76:34:63:34:c0:84:4d:94:03:01:53:55:
9d:52:5a:37:af:d9:d3:44:7e:57:ce:db:cc:ee:45:31:40:ef:
ef:f6:8f:9a:fc:4f:f7:07:45:a9:32:5d:1d:dd:27:93:30:4c:
90:d5:bb:64:4f:bc:4f:d0:8e:f8:ea:54:0c:3e:40:0f:26:38:
a8:e3:c8:d9:39:08:5a:19:97:ca:84:89:91:92:25:e5:71:9f:
98:96:a2:dd:d8:ad:69:ee:83:d5:08:44:e6:9d:ba:02:d2:68:
2a:c0:1d:02:0b:b8:82:ed:c3:0c:4e:27:a2:d2:3b:42:05:80:
f7:22:79:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:24 2025 by rpki-client